System and method for protecting the privacy and security of stored biometric data

Abstract

A data storage system that protects privacy and ensures security includes a plurality of nodes in a networked architecture, the nodes being adapted to securely communicate and co-operate with one another to allow storage and retrieval of data. A single piece of biometric data is associated only with a blinded identifier and securely divided across one or more nodes, adapted for data storage. The data itself and the link to the original individual, from whom the biometric was acquired, cannot be obtained without the co-operation of two or more nodes.

Description

FIELD OF THE INVENTION [0001] The present invention relates to the privacy and protection of stored biometric data, and in particular to a computer implemented architectures and methodology providing for the separation of data between repositories. BACKGROUND [0002] Systems for authenticating the identity of an individual are now becoming widely deployed. Such systems may be used to enhance security at a border crossing, to identify individuals in a citizen ID scheme, to allow physical access to a building, to provide logical access to networks and computer applications, to prove identity during retail transactions, amongst many other possible applications. [0003] Known techniques used within such authentication systems for validating the identity of an individual include the use of passwords, tokens, biometrics, or any combination of these. Within a biometric-based system, biometric samples are captured from an individual and enrolled, or stored, within the system for use in later ...

AI Technical Summary

Benefits of technology

[0014] A first embodiment of the invention provides a data storage architecture and methodology that protect privacy and ensures security. In this embodiment, the system includes a plurality of nodes in a networked architecture, the nodes being adapted to securely communicate and co-operate with one another to allow storage and retrieval

Problems solved by technology

As such, even if an attacker is able to gain access, in an unauthorized manner, to the stored biometric images, it should be impossible for that attacker to determine from which individual the biometric data was acquired.

Current state-of-the-art biometric storage systems do not provide this capability, as they typically store the user identifier along with the corresponding biometric image in the same database, often using the identifier to index the image for later retrieval.

Images